Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa
File:                     3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier:          7N6cSxYadLmX0kZMDIxPddbhyl8JCKlhPgsOPtJ0eHQ=
Subject key identifier:   24:00:5D:31:9B:B3:3F:CA:A4:3A:8C:84:C7:C7:CB:E4:6C:B2:4B:E5
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       1A3C7F25B58A0525B54754643161E063449BF3D6
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:00:58 +0000
ROA not before:           Tue 04 Feb 2025 19:55:58 +0000
ROA not after:            Tue 03 Feb 2026 20:00:58 +0000
asID:                     7418
IP address blocks:        200.113.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3c:7f:25:b5:8a:05:25:b5:47:54:64:31:61:e0:63:44:9b:f3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:58 2025 GMT
            Not After : Feb  3 20:00:58 2026 GMT
        Subject: CN=24005D319BB33FCAA43A8C84C7C7CBE46CB24BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:91:e5:53:07:4f:40:26:80:00:b7:db:68:
                    03:a0:93:19:b6:b0:69:ae:fb:d6:04:5d:d3:dd:a0:
                    e7:3a:d4:81:5b:dd:4f:16:aa:f3:37:66:4f:69:ef:
                    b9:40:e3:9f:82:3d:62:9a:6e:29:48:3d:69:74:e7:
                    67:aa:93:ce:eb:fb:0d:02:a5:55:1f:05:19:34:07:
                    5e:57:5f:b5:25:29:ef:a1:05:0a:dd:ed:26:c5:4e:
                    1a:f5:53:c7:c6:52:08:05:9b:df:c6:dd:f5:68:b2:
                    70:6a:95:5c:ba:1b:ef:ec:f1:0b:6f:ba:d7:8e:6f:
                    95:29:31:7d:f2:b4:18:bf:58:e7:1e:eb:15:91:1f:
                    cf:1d:66:b4:0d:15:6b:66:15:89:1d:0d:de:16:61:
                    d8:1e:20:93:41:a3:d5:bd:f3:32:d5:64:f2:44:8c:
                    4e:6d:1d:54:3c:2e:ec:00:a1:54:71:c6:f8:ff:3e:
                    cf:13:f2:f8:3f:84:a3:63:25:6a:86:c3:b2:07:21:
                    1f:cc:8d:f1:04:9b:af:cd:d2:15:07:5c:3c:28:5f:
                    59:92:a4:82:12:e0:f5:4c:0c:0c:c1:e4:55:e1:45:
                    36:00:ba:6c:18:a0:82:e6:38:4f:f4:e4:cb:3b:dc:
                    fc:e5:81:51:a9:09:79:84:c4:de:17:7e:4f:23:90:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:5D:31:9B:B3:3F:CA:A4:3A:8C:84:C7:C7:CB:E4:6C:B2:4B:E5
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ce:39:da:bf:47:50:b4:ff:9f:f5:b2:96:36:72:d4:b7:d4:9c:
         87:a5:76:88:1c:da:21:fe:6c:db:bf:68:b2:e1:dd:ed:e4:cf:
         1f:d6:8e:e8:98:20:3c:a6:00:65:f5:69:98:c4:13:7d:d4:23:
         71:f5:4b:82:90:07:96:8a:f3:97:a5:6c:a2:7d:16:cc:07:61:
         8d:c7:8f:5a:eb:29:6a:4e:58:e3:bb:32:f4:c1:07:ad:0e:57:
         e2:de:e5:ba:b7:78:be:14:48:00:b2:a8:ca:68:74:c6:dc:6f:
         73:7f:d0:58:88:1f:56:65:47:45:9c:9d:68:e1:1b:21:39:fe:
         75:6f:44:2a:37:7d:23:5b:eb:f2:ed:5c:eb:41:86:94:22:62:
         de:28:37:0a:1c:d4:58:fd:a5:fb:1e:49:25:3d:de:59:ee:f5:
         e9:fc:ca:a4:26:73:99:c6:be:ec:6f:7b:4b:c8:92:f7:1c:4e:
         c5:ed:20:c0:09:a6:66:d9:31:7e:7c:5e:f1:23:18:34:ea:fa:
         5e:55:47:97:b6:e6:f6:b2:23:e2:68:35:92:0e:df:3c:ec:f6:
         b1:41:67:70:d1:40:4f:aa:52:23:28:67:41:ee:f8:02:03:37:
         6e:70:2f:06:5c:0d:5f:b3:f1:17:10:e2:e1:57:51:71:5b:0b:
         51:bf:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:57:39 2025 by rpki-client